Yogesh Sharma wrote: > On 07:43 A. Khattri wrote: > >>Incidently, you can use libnss-mysql to avoid having to create an >>actual >>system account if you need "true" virtual users. > > > > Any link to documentation or example for implementing libnss-mysql based > virtual users ? > Database schema, user name, config file etc. > It's pretty straightforward. libnss-mysql configuration file takes a SQL query for each get*() call, so there are no constraints for the db schema. Examples are in /usr/share/doc after installing the package. What I haven't figured out yet: Calls to NSS are made in the context of the user running e.g. "id", so if you use a socket connection to mysql you need to allow *every* user to read from the socket. I haven't investigated the implications in terms of security yet.
cheers Paul -- [email protected] mailing list
